Overview

overview

10

Static

static

5127c48b8b...92.exe

windows7_x64

10

5127c48b8b...92.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5127c48b8bf8414bde0e4f4801022e71b15066ec0175b476ea071c595ecf4b92

  • Size

    213KB

  • Sample

    220124-ees1eabfal

  • MD5

    a6bea852441fd3a2658d4882f1823492

  • SHA1

    396958216e3251d56fc704072cd9679aa8517412

  • SHA256

    5127c48b8bf8414bde0e4f4801022e71b15066ec0175b476ea071c595ecf4b92

  • SHA512

    ca4524303dd48c04b326acfe59750eed576c842314f6fc7a6d61e0254b8e89490b5db09749fda4ebd43523135923a878aac93aa2961de47a7f2b7def134f47dc

Score
10/10
njrattrojan

Malware Config

Targets

    • Target

      5127c48b8bf8414bde0e4f4801022e71b15066ec0175b476ea071c595ecf4b92

    • Size

      213KB

    • MD5

      a6bea852441fd3a2658d4882f1823492

    • SHA1

      396958216e3251d56fc704072cd9679aa8517412

    • SHA256

      5127c48b8bf8414bde0e4f4801022e71b15066ec0175b476ea071c595ecf4b92

    • SHA512

      ca4524303dd48c04b326acfe59750eed576c842314f6fc7a6d61e0254b8e89490b5db09749fda4ebd43523135923a878aac93aa2961de47a7f2b7def134f47dc

    Score
    10/10
    njrattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks